Skip to content

ci: adopt self-hosted runner toggle for safe CI + bot jobs #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
WomB0ComB0 merged 10 commits into from
Sep 29, 2026
Merged

ci: adopt self-hosted runner toggle for safe CI + bot jobs #91

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
17a5457
ci: route conventional-title-labeler.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
e1207ab
ci: route dependency-licences.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
3e26d35
ci: route hooks-sync.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
4b249e1
ci: route hooks-tests.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
95eb726
ci: route label-sync.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
6e3c5a9
ci: route labeler.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
a721eb0
ci: route pr-size-labeler.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
730e177
ci: route repo-drift.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
0543f45
ci: route required.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
63ebe06
ci: route worker-live.yml to self-hosted runner
WomB0ComB0 Sep 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/conventional-title-labeler.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ jobs:
permissions:
contents: read
pull-requests: write
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- name: Map conventional title prefix to a C-* label
# TITLE is read from env (never interpolated into the script) to avoid
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dependency-licences.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ permissions: {}
jobs:
licence-check:
name: licence check (warn-only)
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
permissions:
contents: read
steps:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/hooks-sync.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ permissions:
jobs:
lint:
name: shellcheck + parse
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand All @@ -55,7 +55,7 @@ jobs:

smoke:
name: smoke — raw-fetch fallback path
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/hooks-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ permissions:
jobs:
bats:
name: bats
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/label-sync.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ permissions:
jobs:
sync:
name: Sync Labels
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/labeler.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
permissions:
contents: read
pull-requests: write
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-size-labeler.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
permissions:
contents: read
pull-requests: write
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: pascalgn/size-label-action@56b489b027932ec0cf60438a1a5f1a19c8fc71ff # v0.5.7
env:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/repo-drift.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ concurrency:
jobs:
drift:
name: installer repo list matches the org
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/required.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ concurrency:
jobs:
shellcheck:
name: shellcheck (install.sh + scripts)
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down Expand Up @@ -443,7 +443,7 @@ jobs:

powershell:
name: PowerShell parse + analyze (*.ps1)
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down Expand Up @@ -533,7 +533,7 @@ jobs:

worker:
name: worker (get.resq.software)
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
Expand Down Expand Up @@ -592,7 +592,7 @@ jobs:
name: required
needs: [shellcheck, powershell, worker]
if: always()
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
steps:
- name: Gate on required checks
run: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/worker-live.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ concurrency:
jobs:
live:
name: live endpoint matches main
runs-on: ubuntu-latest
runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && fromJSON('["self-hosted","linux","x64","zima"]') || 'ubuntu-latest' }}
# Backstop only. The script enforces its own DEADLINE_MS (20 minutes) and
# prints a diagnosis when it expires; this must stay comfortably above that
# or the job is killed first and that diagnosis is lost. It exists so a
Expand Down
Loading